Hi Shanka,
I have the same problem. The business requirement is that I authenticate user supplied credentials with our directory server via LDAP. I first set up the following in Spring configuration XML:
<bean id="SSLKeyStoreAccess" class="org.springframework.beans.factory.config.MethodInv okingFactoryBean">
<property name="targetObject">
<bean class="org.springframework.beans.factory.config.MethodInv okingFactoryBean">
<property name="targetClass" value="java.lang.System" />
<property name="targetMethod" value="getProperties" />
</bean>
</property>
<property name="targetMethod" value="putAll" />
<property name="arguments">
<util:properties>
<!-- JKS trustStore contains server public key -->
<prop key="javax.net.ssl.trustStore">C:/servercacerts</prop>
<prop key="javax.net.ssl.trustStorePassword">servercertspwd</prop>
<prop key="javax.net.ssl.trustStoreType">JKS</prop>
<!-- PKCS12 keyStore contains client's (ldapuser) private key -->
<prop key="javax.net.ssl.keyStore">C:/ldapuser-certificate.PFX</prop>
<prop key="javax.net.ssl.keyStorePassword">ldapuserpwd</prop>
<prop key="javax.net.ssl.keyStoreType">PKCS12</prop>
</util:properties>
</property>
</bean>
<bean id="contextSource" class="org.springframework.ldap.core.support.LdapContextS ource">
<property name="url" value="ldaps://192.168.1.10:636" />
<property name="pooled" value="false" />
<!-- Setting authentication strategy seems to be causing a problem that does not exist without this property setting -->
<property name="authenticationStrategy">
<bean class="org.springframework.ldap.core.support.ExternalTlsD irContextAuthenticationStrategy">
<property name="shutdownTlsGracefully" value="true" />
</bean>
</property>
</bean>
<bean id="ldapTemplate" class="org.springframework.ldap.core.LdapTemplate">
<constructor-arg ref="contextSource" />
</bean>
In Java code, I first determine the actual DN for the user with this method, before invoking the authenticate method on ldapTemplate. This is where I am running into the same error as you, i.e. "TLS already started". If I remove the setAuthenticationStrategy(externalTlsDirContextAut henticationStrategy) in Spring configuration, this method below works just fine.
public String getUserDNByUserName(String userName) {
AndFilter filter = new AndFilter()
.and(new EqualsFilter("objectclass", "person"))
.and(new EqualsFilter("cn", userName));
List result = ldapTemplate.search(DistinguishedName.EMPTY_PATH, filter.encode(), new AbstractContextMapper() {
@Override
protected Name doMapFromContext(DirContextOperations ctx) {
return ctx.getDn();
}
});
if (result == null || result.size() != 1) {
throw new RuntimeException("User not found or not unique");
}
return result.get(0).toString();
}
Were you able to resolve this eventually?
Thanks.
Ashwin